This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: 5m8wC7ZRENlOjq4BgofRHNCZNe5lkiFzCU5Fiu0HbGI= Subject key identifier: 88:69:06:1C:78:6B:3D:43:9A:53:73:D2:11:06:7E:6F:FA:26:84:73 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 64DD773575678DB12F0ED15DB7BDFEF7DB86DA82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 0105 Signing time: Fri 05 Dec 2025 05:12:18 +0000 Manifest this update: Fri 05 Dec 2025 05:07:18 +0000 Manifest next update: Mon 08 Dec 2025 16:05:18 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: qKb53X5AkMIC/4o0OxJR99jNBKIiqRUq7pOGv6Cw5Ho=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dd:77:35:75:67:8d:b1:2f:0e:d1:5d:b7:bd:fe:f7:db:86:da:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Dec 5 05:07:18 2025 GMT Not After : Dec 8 16:05:18 2025 GMT Subject: CN=8869061C786B3D439A5373D211067E6FFA268473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:66:82:59:76:e8:a7:ab:b9:64:82:13:cd: 2f:7c:b2:34:39:c6:e2:b5:c4:d5:d0:42:f8:8d:47: d3:17:ab:8b:b5:cf:ab:1b:48:48:ba:41:bd:46:61: a3:e3:a2:7c:a2:ed:45:1c:91:bf:d3:16:7e:60:a9: 8d:62:1f:1d:e9:ab:56:b0:68:41:2e:bf:15:da:ac: 9f:ce:91:c7:72:de:b9:ff:62:cf:59:a1:16:46:d1: d4:b5:cb:58:f1:e2:48:ad:b1:2d:39:73:89:e7:41: 8d:44:63:0a:5d:fb:e3:aa:23:08:f6:05:0d:4a:53: 88:d8:29:f4:f7:b6:dc:a6:b3:41:1a:0d:ed:50:e5: ae:7e:50:63:78:09:58:cb:d5:bf:2e:c6:fa:7e:e9: 64:8a:72:8f:3f:d1:94:2f:ec:85:c8:09:b3:9e:4f: 7a:ec:03:f1:30:6a:98:19:e8:49:60:c1:32:02:ce: ee:d3:8a:63:59:5c:a6:9c:80:dc:e8:17:4d:ad:5d: 37:15:9e:e4:05:27:da:39:93:fd:4f:a3:c9:91:af: db:1f:24:5e:8f:a3:8f:19:64:3a:d9:6c:25:69:f4: ca:cb:ce:d3:cf:58:27:7c:5d:4b:9b:fb:02:a9:f2: 7a:d4:ae:ad:00:ce:9f:d5:5f:c4:93:f0:a2:76:6b: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:69:06:1C:78:6B:3D:43:9A:53:73:D2:11:06:7E:6F:FA:26:84:73 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0b:4d:49:36:b7:35:cc:fd:45:68:c8:60:b6:f6:a3:78:47: 3d:ef:55:67:73:2b:ad:2d:6b:d5:ab:39:ed:da:03:bc:ed:db: a6:5d:d3:1d:7a:2d:72:33:58:3e:73:78:27:2f:82:86:69:68: 47:d1:9e:ab:8d:6a:c4:e7:51:4c:8f:5f:ed:6a:b0:46:91:9a: c8:4b:61:f0:be:3c:c3:af:dd:1f:73:e6:67:99:9d:bb:da:03: 68:43:21:be:ca:cb:aa:ea:d5:f1:b2:da:6f:a5:e7:6a:f9:24: c0:d8:5d:12:41:c7:bf:77:d8:9c:d8:c8:eb:74:ff:fb:87:80: cf:fd:1e:af:59:9c:89:8f:de:02:43:1a:00:be:1f:a3:1b:eb: 51:a6:38:47:24:e8:8b:04:ba:86:64:dc:02:95:a7:91:be:86: 54:28:6d:3a:78:d9:8c:22:93:b2:38:f6:6c:ba:71:db:c2:65: 93:98:93:68:07:9e:69:bc:b3:cd:b2:37:cb:eb:da:1e:78:a4: f6:71:34:1b:8f:1e:97:5f:48:7b:2c:3a:43:a3:06:14:fb:73: 3b:fe:06:00:8f:c9:4d:b6:98:87:92:89:d0:24:b1:dc:75:dd: 67:e8:d4:c4:56:9f:bb:c1:76:91:5b:56:d8:9c:26:41:8c:11: ba:c5:39:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZN13NXVnjbEvDtFdt73+99uG2oIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTEyMDUwNTA3MThaFw0yNTEyMDgxNjA1MThaMDMxMTAvBgNV BAMTKDg4NjkwNjFDNzg2QjNENDM5QTUzNzNEMjExMDY3RTZGRkEyNjg0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZGaCWXbop6u5ZIITzS98sjQ5 xuK1xNXQQviNR9MXq4u1z6sbSEi6Qb1GYaPjonyi7UUckb/TFn5gqY1iHx3pq1aw aEEuvxXarJ/Okcdy3rn/Ys9ZoRZG0dS1y1jx4kitsS05c4nnQY1EYwpd++OqIwj2 BQ1KU4jYKfT3ttyms0EaDe1Q5a5+UGN4CVjL1b8uxvp+6WSKco8/0ZQv7IXICbOe T3rsA/EwapgZ6ElgwTICzu7TimNZXKacgNzoF02tXTcVnuQFJ9o5k/1Po8mRr9sf JF6Po48ZZDrZbCVp9MrLztPPWCd8XUub+wKp8nrUrq0Azp/VX8ST8KJ2a+WlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiGkGHHhrPUOaU3PSEQZ+b/omhHMwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwLTUk2tzXM/UVoyGC29qN4Rz3vVWdzK60t a9WrOe3aA7zt26Zd0x16LXIzWD5zeCcvgoZpaEfRnquNasTnUUyPX+1qsEaRmshL YfC+PMOv3R9z5meZnbvaA2hDIb7Ky6rq1fGy2m+l52r5JMDYXRJBx7932JzYyOt0 //uHgM/9Hq9ZnImP3gJDGgC+H6Mb61GmOEck6IsEuoZk3AKVp5G+hlQobTp42Ywi k7I49my6cdvCZZOYk2gHnmm8s82yN8vr2h54pPZxNBuPHpdfSHssOkOjBhT7czv+ BgCPyU22mIeSidAksdx13Wfo1MRWn7vBdpFbVticJkGMEbrFOTg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:57 2025 by rpki-client